Abstract:Security attacks present unique challenges to the design of self-adaptation mechanism for software-intensive systems due to the adversarial nature of the environment. Game-theoretical approaches have been explored in security to model malicious behaviors and design reliable defense for the system in a mathematically grounded manner. However, modeling the system as a single player, as done in prior works, is insufficient for the system under partial compromise and for the design of fine-grained defensive policies where the rest of the system with autonomy can cooperate to mitigate the impact of attacks. To address such issues, we propose a new self-adaptation framework incorporating Bayesian game theory and model the defender (i.e., the system) at the granularity of components. Under security attacks, the architecture model of the system is automatically translated, by the proposed translation process with designed algorithms, into a multi-player Bayesian game. This representation allows each component to be modelled as an independent player, while security attacks are encoded as variant types for the components. By solving for pure equilibrium (i.e., adaptation response), the system’s optimal defensive strategy is dynamically computed, enhancing system resilience against security attacks by maximizing system utility. We validate the effectiveness of our framework through two sets of experiments using generic benchmark tasks tailored for the security domain. Additionally, we exemplify the practical application of our approach through a real-world implementation in the Secure Water Treatment System to demonstrates the applicability and potency in mitigating security risks.

Game theoretical framework for adaptive intrusion detection and response

Dynamic game based intrusion response model

Think That Attackers Think: Using First-Order Theory of Mind in Intrusion Response System.

Game Theoretical Method for Anomaly-Based Intrusion Detection

Game Theoretical Security Detection Strategy for Networked Systems

A Game Theoretical Attack-Defense Model Oriented to Network Security Risk Assessment

An Intrusion Detection Framework Based on Bimatrix Game Theory

Defense for Advanced Persistent Threat with Inadvertent and Malicious Insider Threats

A Game-Theoretic Approach for Threats Detection and Intervention in Surveillance (extended Abstract)

A Non-cooperative Game Approach for Intrusion Detection in Smartphone Systems

A Game-Theoretic Approach for Threats Detection and Intervention in Surveillance

A Game-Theoretical Self-Adaptation Framework for Securing Software-Intensive Systems

Research on Adaptive Intrusion Response System Based on Active-Network

An Adaptive Markov Strategy for Effective Network Intrusion Detection.

Attacker-defender game from a network science perspective.

A Stochastic Game Theoretic Approach to Attack Prediction and Optimal Active Defense Strategy Decision

Defense for Advanced Persistent Threat with Inadvertent or Malicious Insider Threats

Game-Model-Based Network Security Risk Control.

A Game-Theoretical Approach for Finding Optimal Strategies in an Intruder Classification Game

A Parallel Game Model-Based Intrusion Response System for Cross-Layer Security in Industrial Internet of Things

A Dynamic Games Approach to Proactive Defense Strategies against Advanced Persistent Threats in Cyber-Physical Systems